Clarify conditional gh-aw maintenance workflow checks

[Copilot]

Drift Sentinel treated agentics-maintenance.yml as required, though gh-aw generates it only when expiration or no-op issue reporting is enabled. The six workflow locks already use gh-aw v0.90.1.

• Prompt: Check for the maintenance workflow only when its trigger settings require it.
• Lock: Regenerate the drift-sentinel lock.

For example, noop.report-as-issue: false does not trigger maintenance workflow generation.

• Fixes [platform-assessment 2026-10] gh-aw Drift Sentinel findings #36

[MAYELE SECURITY (Dja-m)]

execute